Systems and methods for managing electronic transactions using electronic tokens and tokenized devices

Patent metadata

Field	Value
Publication number	US-10965682-B2
Application number	US-201715491393-A
Country	US
Kind code	B2
Filing date	Apr 19, 2017
Priority date	Jun 19, 2015
Publication date	Mar 30, 2021
Grant date	Mar 30, 2021

Abstract

Systems and methods are provided for managing electronic tokens associated with an account. A system may include a memory storing instructions and account information associated with an account, and a processor configured to executed the stored instructions to: access information associated with one or more electronic tokens associated with the account, wherein the information includes one or more token settings, receive, via a network, information for a transaction request including a first token; analyze the received information to determine whether at least one rule in the one or more token settings is violated, responsive to a determination that at least one rule is violated, transmit an indication that the transaction request is denied, and responsive to a determination that no rules are violated, detokenize the transaction request.

First claim

What is claimed is:

1. A system for managing electronic tokens associated with an account, comprising:
a memory storing instructions and account information associated with an account; and
a processor configured to execute the stored instructions to:
receive, via a network, information for a transaction request associated with the account, the transaction request information comprising a first one of a plurality of tokens associated with the account, the first token being provisioned to an electronic device and being selectable, through a graphical interface of a user device associated with the account, between an active state and a deactivated state indicating whether the electronic device may be used to initiate a transaction, the first token being included in a user-definable group of two or more of the tokens such that the grouped tokens are selectable together;
determine that the first token corresponds to token information associated with the account and stored in a database, the token information comprising information associated with the tokens, the tokens being provisioned to different electronic devices and being selectable between the active state and the deactivated state through the graphical interface;
analyze, when the first token is in the active state, the received transaction request information to determine whether at least one rule associated with the first token is violated, wherein the at least one rule is:
at least partially determinative of whether to approve or deny the transaction request based on the received transaction request information;
modifiable by an individual associated with the account; and
unique to the electronic device; and

at least one of:
responsive to a determination that at least one rule is violated, transmit an indication that the transaction request is denied; or
responsive to a determination that no rules are violated, detokenize the transaction request.

2. The system of claim 1 , wherein the first token includes an alphanumeric string that points to the account, and the alphanumeric string does not include an account number of the account.

3. The system of claim 1 , wherein the processor is further configured to route the detokenized transaction request to a transaction server.

4. The system of claim 1 , wherein the at least one rule includes at least one of a restriction on a geographic location associated with the transaction request or a restriction on a time period associated with the transaction request.

5. The system of claim 1 , wherein the processor is configured to receive the transaction request information from the electronic device.

6. The system of claim 1 , wherein the processor is further configured to determine whether the first token is in the deactivated state.

7. The system of claim 6 , wherein the processor is further configured to transmit an indication that the transaction request is denied when the first token is in the deactivated state.

8. A method for managing electronic tokens associated with an account, comprising:
receiving, by the at least one processor via a network, information for a transaction request associated with the account, the transaction request information comprising a first one of a plurality of tokens associated with the account, the first token being provisioned to an electronic device and being selectable, through a graphical interface of a user device associated with the account, between an active state and a deactivated state indicating whether the electronic device may be used to initiate a transaction, the first token being included in a user-definable group of two or more of the tokens such that the grouped tokens are selectable together;
determining that the first token corresponds to token information associated with the account and stored in a database, the token information comprising information associated with the tokens, the tokens being provisioned to different electronic devices and being selectable between the active state and the deactivated state through the graphical interface;
analyzing, when the first token is in the active state, by the at least one processor, the received transaction request information to determine whether at least one rule associated with the first token is violated, wherein the at least one rule is:
at least partially determinative of whether to approve or deny the transaction request based on the received transaction request information;
modifiable by an individual associated with the account; and
unique to the electronic device; and

at least one of:
responsive to a determination that at least one rule is violated, transmitting an indication that the transaction request is denied; or
responsive to a determination that no rules are violated, detokenizing the transaction request.

9. The method of claim 8 , wherein the first token includes an alphanumeric string that points to the account, and the alphanumeric string does not include an account number of the account.

10. The method of claim 8 , further comprising routing the detokenized transaction request to a transaction server.

11. The method of claim 8 , wherein the at least one rule includes at least one of a restriction on a geographic location associated with the transaction request or a restriction on a time period associated with the transaction request.

12. The method of claim 8 , wherein the information for the transaction request information is received from the electronic device.

13. The method of claim 12 , wherein the electronic device comprises a wearable device, an electronic key, an appliance, or a vehicle.

14. The method of claim 12 , wherein the electronic device comprises a computer terminal, and the first token is provisioned to a web browser of the computer terminal.

15. The method of claim 8 , further comprising determining whether the first token is in the deactivated state.

16. The method of claim 13 , further comprising transmitting an indication that the transaction request is denied when the first token is in the deactivated state.

17. A non-transitory computer-readable medium storing instructions which, when executed, cause at least one processor to perform operations for managing electronic tokens associated with an account, the operations comprising:
receiving, via a network, information for a transaction request associated with the account, the transaction request information comprising a first one of a plurality of tokens associated with the account, the first token being provisioned to an electronic device and being selectable, through a graphical interface of a user device associated with the account, between an active state and a deactivated state indicating whether the electronic device may be used to initiate a transaction, the first token being included in a user-definable group of two or more of the tokens such that the grouped tokens are selectable together;
determining that the first token corresponds to token information associated with the account and stored in a database, the token information comprising information associated with the tokens, the tokens being provisioned to different electronic devices and being selectable between the active state and the deactivated state through the graphical interface;
analyzing, when the first token is in the active state, the received transaction request information to determine whether at least one rule associated with the first token is violated, wherein the at least one rule is:
at least partially determinative of whether to approve or deny the transaction request based on the receiv

Assignees

• Capital One Services Llc

Inventors

• Moreton Paul
• Douglas Lawrence
• Poole Thomas
• Clarke Thomas Christopher
• Choi Saejin

Classifications

• G06F21/6245 Primary

  Protecting personal data, e.g. for financial or medical purposes · CPC title

• H04W12/08

  Access security · CPC title

• H04L63/123

  received data contents, e.g. message integrity · CPC title

• G06F21/88

  Detecting or preventing theft or loss · CPC title

• G06F21/41

  where a single sign-on provides access to a plurality of computers · CPC title